CVE-2017-8895 : What You Need to Know

Veritas Backup Exec 2014, 15, and 16 versions prior to specified builds have a use-after-free vulnerability that can lead to denial of service or remote code execution.

Understanding CVE-2017-8895

What is CVE-2017-8895?

In Veritas Backup Exec versions before the mentioned builds, a vulnerability in multiple agents allows unauthorized attackers to crash the agent or potentially gain control over the system.

The Impact of CVE-2017-8895

This vulnerability, known as use-after-free, can result in a denial of service or remote code execution if exploited by attackers.

Technical Details of CVE-2017-8895

Vulnerability Description

The use-after-free vulnerability in multiple agents of Veritas Backup Exec versions can be exploited by attackers to crash the agent or take control of the system.

Affected Systems and Versions

Veritas Backup Exec 2014 version prior to build 14.1.1187.1126
Veritas Backup Exec 15 version prior to build 14.2.1180.3160
Veritas Backup Exec 16 version prior to FP1

Exploitation Mechanism

Attackers can exploit this vulnerability to crash the agent or potentially gain control over both the agent process and the system it is operating on.

Mitigation and Prevention

Immediate Steps to Take

Update Veritas Backup Exec to the recommended builds or versions to mitigate the vulnerability.
Monitor for any unusual activities on the affected systems.

Long-Term Security Practices

Regularly update and patch software to prevent known vulnerabilities.
Implement network segmentation to limit the impact of potential attacks.
Conduct regular security training for employees to enhance awareness.

Patching and Updates

Ensure that Veritas Backup Exec is regularly updated to the latest versions to address security vulnerabilities.